Password & Credential Management
OmniPriv automates the full lifecycle of privileged credentials — from policy-driven rotation and validation to SSH key lifecycle and bulk onboarding — ensuring every secret stays secure, synchronized, and auditable.
Key Features
Automated credential lifecycle management at enterprise scale
Automated Credential Rotation
Policy-driven rotation with configurable recurrence, rotation period, and daily start time globally or per platform/policy
SSH Key Management Lifecycle
Full SSH key lifecycle — store, rotate, and push key pairs via Change Secret engine; private keys encrypted in vault and never exposed outside; self-service reset workflow
One-Time Password Enforcement
Enforces single-use passwords with automatic credential rotation immediately after each use
Credential Validation & De-sync Resolution
Verify Account Secrets actively tests stored credentials against live assets; automatically pushes corrected passwords when de-sync is detected
Automatic Password Reconciliation
Scheduled reconciliation plans detect and reconcile out-of-sync or lost passwords automatically without external utilities; MFA required to view updated credentials
Password Groups
Administrators define groups where all member accounts automatically share the same password value, propagating updates instantly to all linked accounts
Full Password History
Versioned credential history maintained and accessible by approved users for a configured retention period
Bulk Onboarding Enrollment
Mass enrollment of privileged entities with automatic provisioning of all built-in accounts, privileges, rights, and permissions to organizational standards
Mobile Client — TOTP & Vault Access
Built-in mobile client accessible from any mobile browser without installation; supports TOTP 2FA, ticket approvals, geofencing controls, and role-based vault access
Offline Device Credential Management
Manages and maintains credentials for devices not frequently connected to the corporate network
See Password & Credential Management in Action
Get a personalized walkthrough of how OmniPriv's password & credential management capabilities can be deployed in your environment.